By yuducreative
I am trying to setup an SSL certificate on my droplet. However it is not working, and I don’t know how to troubleshoot it for issues that I can then go and correct.
In /etc/apache2/ssl-certs i have my certificate, intermediate certificate and keyfile
In /etc/apache2/sites-available i have 2 files which were with the droplet on installation - 000-default.conf and default-ssl.conf.
I have followed instructions from https://www.digitalocean.com/community/tutorials/how-to-install-an-ssl-certificate-from-a-commercial-certificate-authority but when I try to go to my site under https nothing happens.
so… how can i troubleshoot this to find any errors? do i need both of those original conf files or will 1 be enough? I have never setup SSL before and so am really stuck. Any help at all would be really appreciated.
Thanks.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
I have checked out many of the tutorials. Thanks for your replies. I am doing this for a client and I am now starting to think I have everything setup correctly,… but it is the client who has not yet setup the relevant subdomain that I was asked to create the certificate for.
I have used this awesome tool https://www.sslshopper.com/ssl-checker.html and checked :
https://my-ip-number - This shows that my certificates and intermediate certificates are setup correctly, the only issue is that the url and certificate common name are different.
https://myclient.subdomain.co.uk - This shows errors.
I used this tool: https://pentest-tools.com/information-gathering/find-subdomains-of-domain
To scan all subdomains of my clients url and sure enough it showed that the sub-domain they requested I setup an SSL certificate for has not been created / point anywhere. So i’m pretty certain this is the issue. Both those tools above are very useful and will come in handy in the future im sure.
Have you checked out this DO tutorial? https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-with-a-free-signed-ssl-certificate-on-a-vps
DO tutorials are awesome. Google this “how to install certificate your_operating_system digitalocean” startssl.com givesaway free SSL certificates. They all comply with modern requirements.
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.